chore(deps): refresh lockfile, dev tools, actions, and hooks; add HTTP client minimum-version policy

[chad-loder]

Clears every update on the Renovate dashboard (#55) and supersedes #58, #60, #62, #64, #65, #66, #67, #71, #73, #74, #75, #76.

• Lockfile upgraded (includes aiohttp, urllib3, anyio, mkdocs-material security fixes); dev-tool floors raised to locked versions; mypy 2.
• Actions and pre-commit hooks re-pinned to latest releases past Renovate's cooldown (7 days; 14 for privileged actions).
• check-jsonschema held at 0.38.1: 0.38.2 needs click>=8.5, semgrep pins click<8.5. Renovate rule added.
• .python-version stays at the oldest supported Python; Renovate's pyenv manager disabled.
• ruff 0.16 / pyright 1.1.414 / ty 0.0.84 findings fixed; CPY001 ignored.
• Docs: HTTP client minimum-version policy (24-month window from each pyhaul release) and wreq in install docs.
• CI: test-floors job runs the suite with every extra at its declared minimum on Python 3.12.

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

❌ Patch coverage is 94.11765% with 1 line in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
src/pyhaul/cli.py	50.00%	1 Missing ⚠️

📢 Thoughts on this report? Let us know!